What is the vulnerability ID for Apache ShenYu Admin?

The vulnerability ID for Apache ShenYu Admin is CVE-2022-37435.

What is the severity rating for CVE-2022-37435?

The severity rating for CVE-2022-37435 is high.

Which versions of Apache ShenYu are affected by CVE-2022-37435?

Versions 2.4.2 and 2.4.3 of Apache ShenYu are affected by CVE-2022-37435.

How can I fix CVE-2022-37435 in Apache ShenYu?

Upgrade to version 2.5.0 of Apache ShenYu which contains a patch for CVE-2022-37435.

Vulnerability/
CVE-2022-37435

high

8.8

CWE

732

1/9/2022

2/9/2022

3/8/2024

CVE-2022-37435: Apache ShenYu Admin Improper Privilege Management

Q: How does CVE-2022-37435 affect Apache ShenYu Admin?

CVE-2022-37435 allows low-privilege administrators to modify high-privilege administrator's passwords in Apache ShenYu Admin.

First published: Thu Sep 01 2022(Updated: )

Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3.

Credit: security@apache.org security@apache.org security@apache.org

Affected Software	Affected Version	How to fix
Apache ShenYu	=2.4.2
Apache ShenYu	=2.4.3
maven/org.apache.shenyu:shenyu-common	>=2.4.2<=2.4.3	2.5.0

Remedy

https://lists.apache.org/thread/ndblyxr2fdrvjtgbs1bogxgv2cgk7t28

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID for Apache ShenYu Admin?
The vulnerability ID for Apache ShenYu Admin is CVE-2022-37435.
What is the severity rating for CVE-2022-37435?
The severity rating for CVE-2022-37435 is high.
How does CVE-2022-37435 affect Apache ShenYu Admin?
CVE-2022-37435 allows low-privilege administrators to modify high-privilege administrator's passwords in Apache ShenYu Admin.
Which versions of Apache ShenYu are affected by CVE-2022-37435?
Versions 2.4.2 and 2.4.3 of Apache ShenYu are affected by CVE-2022-37435.
How can I fix CVE-2022-37435 in Apache ShenYu?
Upgrade to version 2.5.0 of Apache ShenYu which contains a patch for CVE-2022-37435.

collector/github-advisory-latest
alias/GHSA-fjjw-82xw-vfc2
alias/CVE-2022-37435
collector/github-advisory
collector/nvd-index
collector/nvd-cve
agent/type
agent/softwarecombine
agent/author
agent/weakness
agent/references
agent/remedy
agent/severity
agent/description
collector/nvd-api
agent/software-canonical-lookup-request
collector/mitre-cve
source/MITRE
agent/title
agent/last-modified-date
agent/event
agent/first-publish-date
agent/tags
agent/trending
package-manager/maven
vendor/apache
canonical/apache shenyu
version/apache shenyu/2.4.2
version/apache shenyu/2.4.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.